Email: 81 Autolearn: 0 AvgScore: -5.36 AvgScanTime: 2.48 sec Spam: 9 Autolearn: 0 AvgScore: 10.78 AvgScanTime: 4.04 sec Ham: 72 Autolearn: 0 AvgScore: -7.38 AvgScanTime: 2.28 sec Time Spent Running SA: 0.06 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.05 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 9 54.32 100.00 48.61 2 T_SCC_BODY_TEXT_LINE 8 79.01 88.89 77.78 3 DCC_CHECK_NEGATIVE 8 87.65 88.89 87.50 4 XM_B_Unicode 7 40.74 77.78 36.11 5 DKIM_SIGNED 7 51.85 77.78 48.61 6 MIME_HTML_ONLY 7 23.46 77.78 16.67 7 XM_B_Unicode3 7 28.40 77.78 22.22 8 XM_DK_Pass 7 48.15 77.78 44.44 9 XM_B_SpammyWords 7 23.46 77.78 16.67 10 RELAYCOUNTRY_US 6 61.73 66.67 61.11 11 DKIM_VALID 5 44.44 55.56 43.06 12 DKIM_VALID_AU 5 30.86 55.56 27.78 13 BAYES_50 4 45.68 44.44 45.83 14 LOC_TINY_FONT_1 4 18.52 44.44 15.28 15 BAYES_999 3 4.94 33.33 1.39 16 XM_UncommonTLD01 3 12.35 33.33 9.72 17 XM_Multi_Part_URI 3 19.75 33.33 18.06 18 HTML_FONT_LOW_CONTRAST 3 17.28 33.33 15.28 19 XM_Body_Dirty_Words 3 8.64 33.33 5.56 20 XMListUnsubscribeExists 3 23.46 33.33 22.22 21 BAYES_99 3 4.94 33.33 1.39 22 XM_B_SpammyWords2 2 7.41 22.22 5.56 23 DKIM_ADSP_ALL 2 2.47 22.22 0.00 24 FROM_SUSPICIOUS_NTLD 2 2.47 22.22 0.00 25 HTML_IMAGE_ONLY_16 2 2.47 22.22 0.00 26 DKIM_VALID_EF 2 17.28 22.22 16.67 27 FROM_SUSPICIOUS_NTLD_FP 2 2.47 22.22 0.00 28 PDS_OTHER_BAD_TLD 2 2.47 22.22 0.00 29 XM_DHL 2 2.47 22.22 0.00 30 HTML_SHORT_LINK_IMG_2 2 2.47 22.22 0.00 31 T_TM2_M_HEADER_IN_MSG 2 18.52 22.22 18.06 32 XM_B_SpammyWords3 2 2.47 22.22 0.00 33 ALL_TRUSTED 2 29.63 22.22 30.56 34 KHOP_HELO_FCRDNS 2 9.88 22.22 8.33 35 XMSubLong 2 16.05 22.22 15.28 36 XM_B_Unsub 2 7.41 22.22 5.56 37 UNPARSEABLE_RELAY 2 9.88 22.22 8.33 38 DKIM_INVALID 2 7.41 22.22 5.56 39 XM_DK_Undo_02 2 3.70 22.22 1.39 40 RCVD_IN_MSPIKE_H2 2 16.05 22.22 15.28 41 SpammyFromTLD_02 2 2.47 22.22 0.00 42 TR_XM_BayesUnsub 2 7.41 22.22 5.56 43 BAYES_40 2 8.64 22.22 6.94 44 HTML_IMAGE_RATIO_02 2 4.94 22.22 2.78 45 URI_NOVOWEL 1 1.23 11.11 0.00 46 FVGT_m_MULTI_ODD 1 17.28 11.11 18.06 47 RCVD_IN_VALIDITY_SAFE 1 2.47 11.11 1.39 48 HTML_IMAGE_RATIO_06 1 3.70 11.11 2.78 49 TR_XM_SpammyRelay 1 1.23 11.11 0.00 50 DKIM_ADSP_CUSTOM_MED 1 2.47 11.11 1.39 51 XM_H_Long_From01 1 3.70 11.11 2.78 52 DCC_CHECK 1 12.35 11.11 12.50 53 T_FILL_THIS_FORM_SHORT 1 1.23 11.11 0.00 54 FORGED_GMAIL_RCVD 1 1.23 11.11 0.00 55 TR_XM_DK_SendGrid 1 2.47 11.11 1.39 56 XM_Body_Obfu01 1 1.23 11.11 0.00 57 XMSubMetaSx_00 1 4.94 11.11 4.17 58 TR_XM_DK_Unsub 1 6.17 11.11 5.56 59 TO_NO_BRKTS_HTML_ONLY 1 1.23 11.11 0.00 60 T_KAM_HTML_FONT_INVALID 1 7.41 11.11 6.94 61 XMSexyCombo_05 1 1.23 11.11 0.00 62 XMSexyCombo_01 1 3.70 11.11 2.78 63 XM_B_Unsub2 1 2.47 11.11 1.39 64 HTML_MIME_NO_HTML_TAG 1 4.94 11.11 4.17 65 XM_H_PHPMailer 1 2.47 11.11 1.39 66 RELAYCOUNTRY_AU 1 2.47 11.11 1.39 67 XMStockSpam_06 1 1.23 11.11 0.00 68 XM_B_REG_HTML 1 1.23 11.11 0.00 69 URIBL_DBL_SPAM 1 1.23 11.11 0.00 70 TR_XM_DKIM_Undo 1 2.47 11.11 1.39 71 RELAYCOUNTRY_META 1 11.11 11.11 11.11 72 TR_XM_UnparsRelay 1 3.70 11.11 2.78 73 XM_SendGrid 1 4.94 11.11 4.17 74 XM_DIRTYINTL 1 3.70 11.11 2.78 75 LONGLN_LOW_CONTRAST 1 1.23 11.11 0.00 76 MIME_QP_LONG_LINE 1 8.64 11.11 8.33 77 TM2_M_OBFU_COMMENT 1 1.23 11.11 0.00 78 NML_ADSP_CUSTOM_MED 1 2.47 11.11 1.39 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 63 87.65 88.89 87.50 2 T_SCC_BODY_TEXT_LINE 56 79.01 88.89 77.78 3 RELAYCOUNTRY_US 44 61.73 66.67 61.11 4 DKIM_SIGNED 35 51.85 77.78 48.61 5 HTML_MESSAGE 35 54.32 100.00 48.61 6 BAYES_50 33 45.68 44.44 45.83 7 XM_DK_Pass 32 48.15 77.78 44.44 8 DKIM_VALID 31 44.44 55.56 43.06 9 XM_B_Unicode 26 40.74 77.78 36.11 10 ALL_TRUSTED 22 29.63 22.22 30.56 11 DKIM_VALID_AU 20 30.86 55.56 27.78 12 XMListUnsubscribeExists 16 23.46 33.33 22.22 13 BOUNCE_MESSAGE 16 19.75 0.00 22.22 14 XM_B_Unicode3 16 28.40 77.78 22.22 15 ANY_BOUNCE_MESSAGE 16 19.75 0.00 22.22 16 XM_Multi_Part_URI 13 19.75 33.33 18.06 17 FVGT_m_MULTI_ODD 13 17.28 11.11 18.06 18 RCVD_IN_MSPIKE_WL 13 16.05 0.00 18.06 19 TM2_M_URI_OPT_OUT 13 16.05 0.00 18.06 20 T_TM2_M_HEADER_IN_MSG 13 18.52 22.22 18.06 21 MIME_HTML_ONLY 12 23.46 77.78 16.67 22 DKIM_VALID_EF 12 17.28 22.22 16.67 23 XM_B_SpammyWords 12 23.46 77.78 16.67 24 RCVD_IN_MSPIKE_H2 11 16.05 22.22 15.28 25 XMSubLong 11 16.05 22.22 15.28 26 LOC_TINY_FONT_1 11 18.52 44.44 15.28 27 HTML_FONT_LOW_CONTRAST 11 17.28 33.33 15.28 28 BAYES_60 10 12.35 0.00 13.89 29 BAYES_00 10 12.35 0.00 13.89 30 DCC_CHECK 9 12.35 11.11 12.50 31 RCVD_IN_MSPIKE_H5 9 11.11 0.00 12.50 32 BAYES_05 8 9.88 0.00 11.11 33 RELAYCOUNTRY_META 8 11.11 11.11 11.11 34 IN_ZIMBRA_NJ_WHITELIST 8 9.88 0.00 11.11 35 FSL_BULK_SIG 7 8.64 0.00 9.72 36 XM_UncommonTLD01 7 12.35 33.33 9.72 37 INVALID_MSGID 6 7.41 0.00 8.33 38 TooManyTo_001 6 7.41 0.00 8.33 39 KHOP_HELO_FCRDNS 6 9.88 22.22 8.33 40 TO_MALFORMED 6 7.41 0.00 8.33 41 MIME_QP_LONG_LINE 6 8.64 11.11 8.33 42 MSGID_NOFQDN1 6 7.41 0.00 8.33 43 UNPARSEABLE_RELAY 6 9.88 22.22 8.33 44 MAILING_LIST_MULTI 6 7.41 0.00 8.33 45 T_KAM_HTML_FONT_INVALID 5 7.41 11.11 6.94 46 BAYES_40 5 8.64 22.22 6.94 47 XMNumbers 5 6.17 0.00 6.94 48 TVD_RCVD_IP 5 6.17 0.00 6.94 49 XM_shorewaves_Whitelist 5 6.17 0.00 6.94 50 T_TooManySym_01 5 6.17 0.00 6.94 51 XM_SPF_SoftFail 5 6.17 0.00 6.94 52 TR_XM_BayesUnsub 4 7.41 22.22 5.56 53 XM_Body_Dirty_Words 4 8.64 33.33 5.56 54 XM_B_SpammyWords2 4 7.41 22.22 5.56 55 TR_XM_DK_Unsub 4 6.17 11.11 5.56 56 DKIM_INVALID 4 7.41 22.22 5.56 57 XM_B_Unsub 4 7.41 22.22 5.56 58 TR_XM_DK_Bayes1 3 3.70 0.00 4.17 59 HTML_MIME_NO_HTML_TAG 3 4.94 11.11 4.17 60 XM_UB50 3 3.70 0.00 4.17 61 BAYES_80 3 3.70 0.00 4.17 62 TR_XM_DK_Bayes 3 3.70 0.00 4.17 63 T_TooManySym_02 3 3.70 0.00 4.17 64 XMGenDplmaNmb 3 3.70 0.00 4.17 65 BOTNET_IPINHOSTNAME 3 3.70 0.00 4.17 66 TVD_SPACE_RATIO 3 3.70 0.00 4.17 67 XMSubMetaSx_00 3 4.94 11.11 4.17 68 UNTRUSTED_Relay 3 3.70 0.00 4.17 69 T_TooManySym_03 3 3.70 0.00 4.17 70 XM_SendGrid 3 4.94 11.11 4.17 71 XMDiploma_00 3 3.70 0.00 4.17 72 LotsOfNums_01 3 3.70 0.00 4.17 73 MIME_BOUND_DIGITS_15 2 2.47 0.00 2.78 74 LOTS_OF_MONEY 2 2.47 0.00 2.78 75 XMSexyCombo_01 2 3.70 11.11 2.78 76 XM_H_Trusted_IP 2 2.47 0.00 2.78 77 HTML_IMAGE_RATIO_06 2 3.70 11.11 2.78 78 XMDateMe_00 2 2.47 0.00 2.78 79 TooManyTo_002 2 2.47 0.00 2.78 80 RCVD_IN_IADB_SENDERID 2 2.47 0.00 2.78 81 HTML_IMAGE_ONLY_32 2 2.47 0.00 2.78 82 XM_DK_Undo_01 2 2.47 0.00 2.78 83 RCVD_IN_MSPIKE_H4 2 2.47 0.00 2.78 84 TR_XM_UnparsRelay 2 3.70 11.11 2.78 85 RCVD_IN_MSPIKE_H3 2 2.47 0.00 2.78 86 FVGT_m_MULTI_ODD_EMAIL 2 2.47 0.00 2.78 87 RELAYCOUNTRY_FR 2 2.47 0.00 2.78 88 XM_H_Long_From01 2 3.70 11.11 2.78 89 T_OBFU_PDF_ATTACH 2 2.47 0.00 2.78 90 TR_XM_DK_Bayes2 2 2.47 0.00 2.78 91 RELAYCOUNTRY_GB 2 2.47 0.00 2.78 92 RELAYCOUNTRY_IT 2 2.47 0.00 2.78 93 BAYES_20 2 2.47 0.00 2.78 94 RCVD_IN_IADB_LISTED 2 2.47 0.00 2.78 95 HTML_IMAGE_RATIO_02 2 4.94 22.22 2.78 96 SCC_BODY_URI_ONLY 2 2.47 0.00 2.78 97 XM_PDF 2 2.47 0.00 2.78 98 RCVD_IN_IADB_DK 2 2.47 0.00 2.78 99 RCVD_IN_IADB_SPF 2 2.47 0.00 2.78 100 XM_DIRTYINTL 2 3.70 11.11 2.78 101 TR_XM_SpammyWords4 2 2.47 0.00 2.78 102 HK_RANDOM_ENVFROM 2 2.47 0.00 2.78 103 XM_Dr_From 1 1.23 0.00 1.39 104 SPOOF_COM2OTH 1 1.23 0.00 1.39 105 XM_UCStrings02 1 1.23 0.00 1.39 106 RELAYCOUNTRY_AU 1 2.47 11.11 1.39 107 PLING_QUERY 1 1.23 0.00 1.39 108 HTML_FONT_FACE_BAD 1 1.23 0.00 1.39 109 TR_XM_SB_Phish 1 1.23 0.00 1.39 110 XMBody_78 1 1.23 0.00 1.39 111 BAYES_999 1 4.94 33.33 1.39 112 RCVD_IN_VALIDITY_SAFE 1 2.47 11.11 1.39 113 XM_B_Investor 1 1.23 0.00 1.39 114 TR_XM_COVIDMETA1 1 1.23 0.00 1.39 115 RCVD_IN_VALIDITY_CERTIFIED 1 1.23 0.00 1.39 116 RELAYCOUNTRY_SE 1 1.23 0.00 1.39 117 XMSubPhish11 1 1.23 0.00 1.39 118 XMBrknScrpt_02 1 1.23 0.00 1.39 119 XMSubject_78 1 1.23 0.00 1.39 120 ACT_NOW_CAPS 1 1.23 0.00 1.39 121 XM_DK_Undo_02 1 3.70 22.22 1.39 122 XM_B_Phish66 1 1.23 0.00 1.39 123 XM_E_Weebly 1 1.23 0.00 1.39 124 XMHTML_After_End 1 1.23 0.00 1.39 125 TR_XM_DKIM_Undo 1 2.47 11.11 1.39 126 TM2_M_VERY_LONG_WORD 1 1.23 0.00 1.39 127 TR_XM_PhishingBody 1 1.23 0.00 1.39 128 XM_OfRef6 1 1.23 0.00 1.39 129 XM_H_PHPMailer 1 2.47 11.11 1.39 130 XM_B_Unsub2 1 2.47 11.11 1.39 131 DRUGS_ERECTILE 1 1.23 0.00 1.39 132 TooManyTo_003 1 1.23 0.00 1.39 133 XMNoVowels 1 1.23 0.00 1.39 134 DKIM_ADSP_CUSTOM_MED 1 2.47 11.11 1.39 135 FROM_EXCESS_BASE64 1 1.23 0.00 1.39 136 MIME_HTML_MOSTLY 1 1.23 0.00 1.39 137 XM_GoogleGroups 1 1.23 0.00 1.39 138 TR_XM_DK_SendGrid 1 2.47 11.11 1.39 139 UPPERCASE_50_75 1 1.23 0.00 1.39 140 HTML_IMAGE_ONLY_20 1 1.23 0.00 1.39 141 HTML_IMAGE_RATIO_04 1 1.23 0.00 1.39 142 TR_Legit_01 1 1.23 0.00 1.39 143 HTML_TAG_BALANCE_BODY 1 1.23 0.00 1.39 144 NML_ADSP_CUSTOM_MED 1 2.47 11.11 1.39 145 BAYES_99 1 4.94 33.33 1.39 146 IN_HORDE_ADDRESS_BOOK 1 1.23 0.00 1.39 147 T_XMDrugObfuBody_14 1 1.23 0.00 1.39 148 XMClaimOffer 1 1.23 0.00 1.39 149 RCVD_IN_IADB_VOUCHED 1 1.23 0.00 1.39 150 XM_Evil_Numbers_Gen 1 1.23 0.00 1.39 151 XMStrtUSub 1 1.23 0.00 1.39 152 XMSubNoVowel 1 1.23 0.00 1.39 153 TR_XM_SpammyWords5 1 1.23 0.00 1.39 ----------------------------------------------------------------------